A user noticed a change in the VDI DaaS portal and the VDI specific Audit Log. They were previously able to perform remote control actions, but now are met with a "permission denied" message. Further investigation reveals some quirky permission behavior and an incident was opened. It seems to be related to the recent change in the SAML provider. It was suggested to enable "manage web app" on org members to test, which fixed the issue. Further assistance from the identity team may be needed to fix the SAML configuration.
Read the entire ‘Troubleshooting Permissions on ControlUp VDI DaaS Portal’ thread below:
Did anything change with the VDI DaaS portal and the VDI specific Audit Log? I thought there was an additional icon where we could see actions performed within the VDI console.
Reason I ask is my helpdesk team is suddenly not able to perform a remote control action, claiming permission denied and I’d like to review any logs.
Sanity checked myself and it definitely used to exist. I should have full role permissions so odd that its not appearing.
Nothing changed, at least not that I know. I still have that button
After which you’ll see something like this
Tried ctrl+f5, clearing cache or incognito/inprivate?
Yea tried incognito and no cookies. Still no icon, weird.
No specific permissions should be needed for that. If it persist you should log a ticket so we can get to the bottom of it.
You need manage web apps 😄
https://support.controlup.com/docs/centralized-audit-log
Guess I should read my own documentation 😅
I am in the ControlUp Admin group, which should allow me to see it. Shortly after I asked about the audit log icon and opened an incident, I noticed some other quirky permission behavior and have opened another incident. We changed our SAML provider yesterday so not sure if that’s causing weird issues.
I’ve got the incident numbers handy if you’re curious.
Maybe related.
Can you enable manage web app on org members just to test? If that fixes it then it’s a SAML auth issue.
Yep, enabled it for org members and it worked. Something with the SAML config is off, I’ll re-read the documentation and see if our identity team can see anything on their side.
I’m glad i was able to help!
Continue reading and comment on the thread ‘Troubleshooting Permissions on ControlUp VDI DaaS Portal’. Not a member? Join Here!
Categories: All Archives, ControlUp for VDI